Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: H30iYmsHeSxAHlkvq5lKZeM9M+OhtCLYRn42TAMHRuQ=
Subject key identifier: 97:34:15:31:35:DC:1F:3A:5C:B1:A0:AE:B6:14:4F:66:94:37:9A:BE
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 019A4DAABDEA8DFC9AD4EDD693D703530E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 06FF
Signing time: Tue 04 Nov 2025 07:00:26 +0000
Manifest this update: Tue 04 Nov 2025 07:00:26 +0000
Manifest next update: Wed 05 Nov 2025 07:00:26 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: wKJ8HAEGCX+CjLbdQrCwCof4attO2MDPdG3sSp1da10=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:bd:ea:8d:fc:9a:d4:ed:d6:93:d7:03:53:0e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Nov 4 07:00:26 2025 GMT
Not After : Nov 5 07:00:26 2025 GMT
Subject: CN=9734153135dc1f3a5cb1a0aeb6144f6694379abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:96:fb:20:36:f5:fb:a9:d1:91:4f:5b:8a:
da:bf:e9:3a:ee:0d:67:d5:bc:14:d3:a5:ea:53:8e:
5c:62:10:5e:9c:0f:c1:95:92:58:fa:8b:75:eb:e2:
57:b9:b4:03:3e:af:28:2a:90:1f:e3:65:79:bb:75:
17:04:fd:dd:6a:c9:d4:6a:85:3a:e1:5e:49:e9:da:
a5:cc:26:09:53:e1:42:aa:07:32:31:c7:43:0b:73:
80:0e:db:7a:d0:a4:32:95:2f:9b:99:50:0e:96:5a:
21:a7:2d:af:8c:45:c9:11:f9:6b:08:13:54:b1:21:
9e:d4:7a:a7:cd:aa:96:cf:81:2d:13:12:d5:1a:96:
bb:2a:58:c7:70:2a:22:a6:5f:39:d8:39:4f:e5:1c:
b4:e4:80:72:c7:e3:4a:4f:a3:cf:7f:a4:fd:18:b1:
1a:14:d9:2f:8f:76:2b:fd:81:ed:13:89:42:7c:e3:
99:4c:6c:4f:83:a9:a5:69:66:fa:75:d6:cf:8c:15:
b8:0c:a5:cd:03:30:10:ee:f6:6f:c9:cf:cd:92:ae:
e2:49:90:03:b3:ed:65:5d:de:8b:99:87:c1:3c:e5:
6b:86:96:1e:e2:97:eb:af:cd:60:c1:1f:6b:58:18:
ba:bb:67:76:26:63:1d:0a:22:bc:d6:9b:f0:8f:ee:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:15:31:35:DC:1F:3A:5C:B1:A0:AE:B6:14:4F:66:94:37:9A:BE
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:9d:fb:e5:98:81:76:87:4b:95:6f:23:55:88:06:b9:25:
da:09:d2:81:f5:63:97:a5:63:4b:e9:d6:25:a6:92:7a:5b:61:
6c:fe:69:6c:0f:4e:1d:97:30:c4:4d:81:e2:5b:d4:3c:38:a2:
4e:13:4f:9b:51:9a:57:52:32:f9:26:42:a1:62:15:4a:8f:0e:
31:5a:33:a3:a8:99:51:0e:b6:77:fb:e7:41:90:ee:0c:2d:2b:
83:d1:a3:70:43:2d:0f:46:51:a1:18:99:5b:24:02:46:21:79:
f0:43:07:8e:63:8c:45:49:86:2f:12:00:c8:2c:8e:bc:fe:7b:
5b:32:de:af:34:17:fa:0c:cf:9b:54:72:66:fc:92:30:72:4b:
f9:03:89:af:a6:4b:f4:57:d2:18:b0:9a:d0:27:48:92:0d:3e:
04:47:6a:85:9e:f5:09:e9:cb:59:d8:cf:a3:93:25:48:c2:76:
6a:12:56:db:71:b5:d1:be:b3:1f:c9:0f:80:24:9c:b1:53:83:
ef:f4:05:95:f8:a7:b8:a6:3f:50:c5:a8:97:db:9d:00:51:35:
77:e1:f7:d8:29:96:81:18:cc:0c:e8:8d:0f:35:9d:b7:b4:59:
5b:24:e1:85:e0:b2:e7:9e:20:ae:c1:ee:de:4f:27:c7:7a:9b:
87:da:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:54 2025 by rpki-client